正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint. The chain allows unauthenticated users to execute arbitrary commands on the server. Update your software ASAP!

PT SWARM

18,766 subscribers

58,178 次观看 • 2 年前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

1 条评论

Felix Kiprop 的头像

Felix Kiprop2 年前

Nice work, Keeping the word safe.🧐. is Poc available yet? I world like to compare with mine.

相关视频

⚠️ We have reproduced CVE-2023-22515 in Atlassian Confluence. Broken access control allows unauthenticated users to gain administrative access to the web application! Update your software ASAP!

⚠️ We have reproduced CVE-2023-22515 in Atlassian Confluence. Broken access control allows unauthenticated users to gain administrative access to the web application! Update your software ASAP!

PT SWARM

83,600 次观看 • 2 年前

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

PT SWARM

80,689 次观看 • 2 年前

⚠️ We’ve reproduced CVE-2025-49113 in Roundcube. This vulnerability allows authenticated users to execute arbitrary commands via PHP object deserialization. If you're running Roundcube — update immediately!

⚠️ We’ve reproduced CVE-2025-49113 in Roundcube. This vulnerability allows authenticated users to execute arbitrary commands via PHP object deserialization. If you're running Roundcube — update immediately!

PT SWARM

50,134 次观看 • 1 年前

⚠️ We've confirmed critical CVE-2024-45519 in Zimbra! SMTP-based vulnerability in postjournal service allows unauthenticated attackers to inject commands under zimbra user. ✅ Update your software ASAP to avoid exploitation!

⚠️ We've confirmed critical CVE-2024-45519 in Zimbra! SMTP-based vulnerability in postjournal service allows unauthenticated attackers to inject commands under zimbra user. ✅ Update your software ASAP to avoid exploitation!

PT SWARM

84,313 次观看 • 1 年前

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Theori

139,689 次观看 • 2 年前

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:

International Cyber Digest

77,014 次观看 • 11 个月前

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

LiveOverflow 🔴

44,787 次观看 • 2 年前

CVE-2023-34362: We haven't figured out how it's moved in wwwroot just yet, but we've just about got the attack chain where we perform SQL injection, own the MOVEit instance and upload/exfitrate files! 🤩 Huge thanks to Caleb Stewart for being my partner in (cyber)crime here! 💪

CVE-2023-34362: We haven't figured out how it's moved in wwwroot just yet, but we've just about got the attack chain where we perform SQL injection, own the MOVEit instance and upload/exfitrate files! 🤩 Huge thanks to Caleb Stewart for being my partner in (cyber)crime here! 💪

John Hammond

152,846 次观看 • 3 年前

CVE-2023-3390: UAF on Linux Netfilter nftables MFT_MSG_NEWRULE leads to LPE. We exploit this tiny 1-day vuln to pwn all targets of Google's kernelCTF for the first time in history. Nice and clear triple-kill 🥳

CVE-2023-3390: UAF on Linux Netfilter nftables MFT_MSG_NEWRULE leads to LPE. We exploit this tiny 1-day vuln to pwn all targets of Google's kernelCTF for the first time in history. Nice and clear triple-kill 🥳

c0m0r1

67,444 次观看 • 3 年前

In this video walkthrough, we break down the basic info of CVE-2023-23397 the zero-day, zero-touch vulnerability that was rated 9.8 on the #CVSS scale. Follow this thread as we detail the general exploitation routine of this #vulnerability.

In this video walkthrough, we break down the basic info of CVE-2023-23397 the zero-day, zero-touch vulnerability that was rated 9.8 on the #CVSS scale. Follow this thread as we detail the general exploitation routine of this #vulnerability.

Trend Micro Research

200,099 次观看 • 3 年前

Microsoft is completely dominating the AI space. They just began rolling out previews of their AI-powered personal assistant for Windows 11 to insiders in the Dev Channel. Key points: -Allows users to issue commands and have the AI automatically modify settings or perform actions in the operating system -Allows users to issue commands and have the AI automatically modify settings or perform actions in the operating system -To use Copilot, users must have Windows Build 23493 or higher in the Dev Channel and Microsoft Edge version 115.0.1901.150 or higher First, Microsoft made a major comeback through Bing (who would’ve thought). Now, they're integrating AI into the OS. Without a doubt, Microsoft is currently winning the AI gold rush amongst big tech. This is what peak execution looks like.

Microsoft is completely dominating the AI space. They just began rolling out previews of their AI-powered personal assistant for Windows 11 to insiders in the Dev Channel. Key points: -Allows users to issue commands and have the AI automatically modify settings or perform actions in the operating system -Allows users to issue commands and have the AI automatically modify settings or perform actions in the operating system -To use Copilot, users must have Windows Build 23493 or higher in the Dev Channel and Microsoft Edge version 115.0.1901.150 or higher First, Microsoft made a major comeback through Bing (who would’ve thought). Now, they're integrating AI into the OS. Without a doubt, Microsoft is currently winning the AI gold rush amongst big tech. This is what peak execution looks like.

Rowan Cheung

387,617 次观看 • 3 年前

Watch us open the camera and uncover the anonymous identity behind Tor browser: We published the writeup for the browser RCE in IonStack. Mythos reported 271 bugs in Firefox 150 but still missed this one. And the Tor Browser is also affected by CVE-2026-10702. Update your Tor!

Watch us open the camera and uncover the anonymous identity behind Tor browser: We published the writeup for the browser RCE in IonStack. Mythos reported 271 bugs in Firefox 150 but still missed this one. And the Tor Browser is also affected by CVE-2026-10702. Update your Tor!

Nebula Security

70,102 次观看 • 9 天前

NGINX rift: We autonomously discovered this 18 yr old heap overflow (CVE-2026-42945) in NGINX impacting version 0.6.27 to 1.30.0. If you use rewrite and set directive, you maybe impacted! Please update your NGINX or change the config to mitigate it. Read more at

NGINX rift: We autonomously discovered this 18 yr old heap overflow (CVE-2026-42945) in NGINX impacting version 0.6.27 to 1.30.0. If you use rewrite and set directive, you maybe impacted! Please update your NGINX or change the config to mitigate it. Read more at

Zhenpeng (Leo) Lin

210,094 次观看 • 2 个月前

We have connected the Sologenic DEX to the VerseX Metaverse. The Sologenic interface allows users to connect their wallets and trade on XRPL through the . platform.

We have connected the Sologenic DEX to the VerseX Metaverse. The Sologenic interface allows users to connect their wallets and trade on XRPL through the . platform.

VerseX

13,140 次观看 • 3 年前

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

V4bel

60,836 次观看 • 1 个月前

Dipping for 2023 is done!Always a good feeling when both crutching and dipping happen in the incredibly tight window we have to do it in, considering both require dry weather. Next step, on crop!

Dipping for 2023 is done!Always a good feeling when both crutching and dipping happen in the incredibly tight window we have to do it in, considering both require dry weather. Next step, on crop!

Ben Dooley 🧢

19,980 次观看 • 3 年前

In the next few days, the Abstract MCP server will allow AI agents to control AGWs to execute actions on behalf of users. In this demo, we have Claude Code executing a swap on Uniswap with a user's AGW. AI agents will soon be able to do everything on Abstract.

In the next few days, the Abstract MCP server will allow AI agents to control AGWs to execute actions on behalf of users. In this demo, we have Claude Code executing a swap on Uniswap with a user's AGW. AI agents will soon be able to do everything on Abstract.

cygaar

38,505 次观看 • 4 个月前

1/ ⛓️ 1inch Weekly Chain Stats (24/02/2023) #1inch is pleased to announce an updated version of the Key Stats! We included in-depth analytics of the previous week's data 🧐 for each blockchain. This allows you to view data on volume and swap and user numbers in the past 7 days.

1/ ⛓️ 1inch Weekly Chain Stats (24/02/2023) #1inch is pleased to announce an updated version of the Key Stats! We included in-depth analytics of the previous week's data 🧐 for each blockchain. This allows you to view data on volume and swap and user numbers in the past 7 days.

1inch

47,202 次观看 • 3 年前

#KongsangMaintenance Dear Master: Kongsang Office will schedule a server maintenance and update on December 1st, 2023, 10:00 (UTC+8), for internal update maintenance. The entrance will be reopened after the maintenance is completed. Stay tuned for exciting new events after the update! 🔧During the maintenance period, Master will not be able to enter Kongsang. Please stay tuned for the announcement if the maintenance time has any changes. Update Period: December 1st, 2023, 10:00 (UTC+8) Update Method: Downtime update maintenance Update Content: [Colossal Clash] Event time: From the update on 12/01/2023 to 23:59 12/21/2023 Event stages and stories will be available! Clear the stages to earn the event currency [Bronze Horses]! [Event Store] Event time: From the update on 12/01/2023 to 23:59 12/23/2023 Participate to win event currency [Bronze Horses], which can be exchanged for goods at the event store. Limited Food Soul Avatar Frames, Avatars, Food Soul Furniture and more! [Cirrus Gift] Event time: From the update on 12/01/2023 to 23:59 12/21/2023 Log in daily to claim rewards. After logging in for 3 days, you can claim an event badge and Soul Core! [Summoning Event] Event time: From the update on 12/01/2023 to 23:59 12/21/2023 Game of Go and Cry of the Phoenix Summon Circles activated! The chance to get SSR Food Soul [Chuyi Flower Cake], SR Food Soul [Xifeng Wine] and Rare Food Soul [Pebble Bread] is UP! Reminder: Chuyi Flower Cake, Xifeng Wine, and Pebble Bread are only available from the Summon Circle during the event, but will later become a permanent addition in future updates. Note: Chuyi Flower Cake can only be summoned from Game of Go Summon Circle. Xifeng Wine can only be summoned from the Cry of the Phoenix Summon Circle. [Impeccable Accuracy] Event time: From the update on 12/01/2023 to 23:59 12/21/2023 During the event, top up or buy packs and monthly salaries to earn points. Claim plentiful rewards once you have enough points! [Touhu Arrow Pitch] Event time: From the update on 12/01/2023 to 23:59 12/21/2023 Charge up and throw an arrow into the bottle! The more throws you make, the more rewards you get! [New Packs in shop] New packs have entered the store! Event time: From the update on 12/01/2023 to 23:59 12/21/2023 New packs will enter the store for sale! [Stove Maestro] Event time: Lasts 2 weeks from 12/04/2023 to 12/17/2023 Matching time: Matching is available every day from 12:00-14:00 and 19:00-22:00. During the matching time, master can participate in Stove Maestro by randomly matching opponents. Rules: Can be checked in-game after maintenance is completed. *All event dates and times are in sync with server time, which can be found in [System].

The Tale of Food

21,235 次观看 • 2 年前

Congratulations to the 2023 Apple Design Awards winners! Your best-in-class apps and games inspire and delight users from around the world. #WWDC23 Check out the winners:

Congratulations to the 2023 Apple Design Awards winners! Your best-in-class apps and games inspire and delight users from around the world. #WWDC23 Check out the winners:

App Store

449,553 次观看 • 3 年前